homepage
Open menu
Go one level top
  • Train and Certify
    Train and Certify

    Immediately apply the skills and techniques learned in SANS courses, ranges, and summits

    • Overview
    • Courses
      • Full Course List
      • Training Roadmap
      • Training Formats
        • OnDemand
        • In-Person
        • Live Online
    • GIAC Certifications
    • Training Events & Summits
      • Event Locations
        • Americas
        • Europe & Middle East
        • Asia Pacific
      • Summits
    • OnDemand
    • Get Started in Cyber
      • Bachelors & Masters Degrees
      • Scholarships
    • Cyber Ranges
  • Manage Your Team
    Manage Your Team

    Build a world-class cyber team with our workforce development programs

    • Overview
      • Why Work with SANS
      • Industries
    • Group Purchasing
    • Build Your Team
      • Team Development
      • Assessments
      • Private Training
      • Hire Cyber Professionals
    • Leadership Training
  • Security Awareness
    Security Awareness

    Increase your staff’s cyber awareness, help them change their behaviors, and reduce your organizational risk

    • Overview
    • Products & Services
      • Security Awareness Training
        • EndUser Training
        • Phishing Platform
      • Specialized
        • Developer Training
        • ICS Engineer Training
        • NERC CIP Training
        • Healthcare Training
      • Risk Assessments
        • Knowledge Assessment
        • Culture Assessment
        • Behavioral Risk Assessment
    • OUCH! Newsletter
    • Career Development
    • Blog
    • Partners
  • Resources
    Resources

    Enhance your skills with access to thousands of free resources, 150+ instructor-developed tools, and the latest cybersecurity news and analysis

    • Overview
    • Webcasts
    • Summits & Forums
    • Content
      • Newsletters
        • NewsBites
        • @RISK
        • OUCH! Newsletter
      • Blog
      • Podcasts
      • Summit Presentations
      • Posters & Cheat Sheets
    • Research
      • White Papers
      • Security Policies
    • Tools
    • Focus Areas
      • Cyber Defense
      • Cloud Security
      • Digital Forensics & Incident Response
      • Industrial Control Systems
      • Cyber Security Leadership
      • Offensive Operations
  • Get Involved
    Get Involved

    Help keep the cyber community one step ahead of threats. Join the SANS community or begin your journey of becoming a SANS Certified Instructor today.

    • Overview
    • Join the Community
    • Work Study
    • Teach for SANS
    • CISO Network
    • Partnerships
    • Sponsorship Opportunities
  • About
    About

    Learn more about how SANS empowers and educates current and future cybersecurity practitioners with knowledge and skills

    • SANS
      • Overview
      • Our Founder
      • Awards
    • Instructors
      • Our Instructors
      • Full Instructor List
    • Mission
      • Our Mission
      • Diversity
      • Scholarships
    • Contact
    • Frequent Asked Questions
    • Customer Reviews
    • Press
    • Careers
  • SANS Sites
    • GIAC Security Certifications
    • Internet Storm Center
    • SANS Technology Institute
    • Security Awareness Training
  • Search
  • Log In
  • Join
    • Account Dashboard
    • Log Out
  1. Home >
  2. Blog >
  3. Getting Started in Cybersecurity with a Non-Technical Background
370x370_Lance-Spitzner.jpg
Lance Spitzner

Getting Started in Cybersecurity with a Non-Technical Background

As organizations and governments around the world are increasingly vulnerable to cyber threats and continue to get hacked, it might feel like we’re...

January 18, 2021

*This blog was originally published March 2018. It has been updated to address new ways to get started in cybersecurity.

As organizations and governments around the world are increasingly vulnerable to cyber threats and continue to get hacked, it might feel like we’re reading or hearing about cybersecurity in the news every day. As a result, there's a growing demand for people to be trained in cybersecurity to help defend against this increasing threat. In fact, a 2018 report by ISC(2) estimates there are almost 3 million openings globally. Additionally, the U.S. Department of Labor reports that occupations in this field are projected to grow 13% from 2016 to 2026, adding 557,100 new jobs in the United States alone. Cybersecurity is a fast paced, highly dynamic field with vast array of specialties to choose from, allowing you to work almost anywhere in the world, with amazing benefits, and an opportunity to make a real difference.

Have you considered a career as a cybersecurity professional, but weren’t really sure if you had the skillset needed for success? Don’t sell yourself short yet.

But Don’t I Need a Cybersecurity or Computer Science Degree?

Absolutely not. Many of the best security professionals bring non-technical backgrounds from english, pre-Med, or psychology majors to auto-mechanics, artists, and stay-at-home moms. Just like the famous saying, “Anyone can cook” from the Pixar movie, Ratatouille, so too can anyone get started in cybersecurity. Speaking as a history major who rode Main Battle Tanks for a living, I can attest to the notion that you canhave a successful career in cybersecurity, even if you bring a non-technical background to the table. In many cases, having a non-technical background can actually be an advantage in the industry.

How so? A dedicated passion to learn and understand how technology works goes a long way. Many people think cybersecurity is all about hacking into or breaking things, but cybersecurity is actually all about learning how technology (and people) work.

The key is not a technical background, but your willingness and desire to learn how technology works and to never stop playing. In addition, there are a growing number of fields in cybersecurity that do not focus on solving technical problems, but instead more human focused problems. These require softer skills, such as privacy, security awareness and training, governance, security communications, or cyber law and ethics.

Findings in the 2018 SANS Security Awareness Report showed that while there is a clear majority of awareness professionals stemming from highly technical backgrounds with a solid understanding of technology and human-related risks, they may lack some necessary skills to excel at implementing a program, such as strong communication. In fact, new fields and opportunities in cybersecurity continue to develop and expand, opportunities that did not exist five or even 10 years ago.

Undergraduate certificate programs like the Certificate in Applied Cybersecurity at the SANS Technology Institute offer a rapid pathway for college students and career changers who want to enter the cybersecurity workforce. No prior cybersecurity experience is required for that program and students gain the foundational skills need to enter the workforce in 7 to 18 months, studying online or at live weeklong SANS events held across the country and around the world.

For the younger learners who want to get a head start on their career path, there are several programs available to help you get started. CyberStart America is a free national program for high school students to master cybersecurity as a gateway to the industry, up their digital skills, and compete for college scholarships!

College students have free programs designed specifically for their needs as well. At Cyber-Fasttrack, you all compete in a two-day Capture-the-Flag event for the chance to win a scholarship worth $18,000 from the world’s largest and most trusted cybersecurity college.

Once you develop a deep understanding of how things work, the hacking (and defending) side easily follows. Even more exciting, you can learn how many technologies work directly from the comforts of home. For example, you can take classes online, build your own lab, or interact with others through the Internet.

Getting Started

In many ways, cybersecurity is similar to engineering or healthcare. There are so many different paths you can specialize in, from mobile device forensics and incident response to penetration testing, endpoint security or security awareness. In fact, the National Institute of Standards and Technology (NIST) has created a framework listing all the different jobs and opportunities in cybersecurity. If you are interested in learning about many of the different fields and specialties that exist, this is a great place to start exploring.

Don’t worry about what path you should take at first. Give yourself grace and time to play with and understand all the different technologies options. Over time, your interests will guide your path. (Interject Yoda voice here.)

To get started, I’d recommend you first get an overview of the basics. Here are some areas you can start learning, begin in whatever area you feel would interest you the most.

large-il_cybersecurity-career-icons.png

  • Coding: Explore the basics of coding, which can help you understand markup language for creating web pages and web applications. Start with languages such as Python, Hypertext Markup Language (HTML), and Javascript. Not sure where to start? Consider online training such as Code Academy, Khan Academy, or grab any beginner’s book.

  • Systems: Learn the basics of administrating a system (i.e. computers). The two most common systems are Linux and Windows. If the resources are available, I recommend you start with Linux first and learn how to administer Linux using the Command Line Interface (CLI), as opposed to the Graphical User Interface (GUI). Learning how to administer a Linux system from the command line, to include scripting, is an extremely powerful skill that will help you no matter what path you take.

  • Applications: Learn how to configure, run and maintain common applications (computer programs), such as a webserver, database or DNS server.

  • Networking: A network is a group of computers or devices that communicate with each other, to include capturing and analyzing network traffic. Learning how a network works is an invaluable skill. You don’t realize it, but you most likely already have a network at home. Think of all the devices connected to your home Wi-Fi network.

Not sure where to start with any of these four areas listed? Start by searching on Google or YouTube. There is no single site or resource where you can learn everything you need, so over time you will use a variety of different resources.

Start with the basics and grow over time (it takes years to really learn all this stuff). However, the skills you develop now in searching and learning from others are critical not only for starting, but a key part of your entire career.

Build a Lab / Hands-on Learning Environment

il_cybersecurity-career-lab.png

One of the best ways to learn all of the above is to set up your own lab at home. It's actually pretty easy, as you can create multiple virtual operating systems on the same physical computer at home, or setup up a lab online in the Cloud, such as using Amazon's AWS or Microsoft’s Azure. Do a quick search on Google or YouTube. There are numerous sites that can walk you through how to set up your lab properly.

Another option is to identify all the different devices on your home Wi-Fi network. Once you setup your lab or map your home network, start interacting with the different computers or devices and learn everything you can. Have a browser on one computer connect to a webserver you setup on another computer. Capture the network traffic from your house’s thermostat and decode what information you are actually sending to the Internet. The possibilities are endless. However, don't start hacking into and breaking things until you first understand the fundamentals of how these technologies work.

Learn from Others

The other key element toward launching your career in cybersecurity is to meet with and learn from others. Try attending a cybersecurity conference in your area. Just about every major city has several events a year. One of the best series of conferences is Bsides, which most likely has an event near you.

Can’t make it to a conference or looking for more interaction? Many cities have monthly cybersecurity community meet-ups. Once you attend one, your network and opportunities will flourish. You can also join online communities, however I highly recommend you attend an actual event and meet people face-to-face first. It’s the fastest way to spin-up your connections.

In addition, there are numerous cybersecurity professionals you can follow online and learn from. As you begin to learn what areas interest you the most, you will find experts in that field you can follow. Here are some thought leaders I follow on Twitter, for example:

  • @briankrebs
  • @schneierblog
  • @lennyzeltser
  • @robertMLee
  • @hacks4pancakes
In Summary

If you’ve always been curious about getting started in cybersecurity, don’t let your education or background determine your career path or limit your options. No matter what your background is, you bring something unique and special to this field, which we desperately need. As long as you have passion, and desire to learn, you’re on the right track. Never lose that desire to learn. Once you start to develop your skills and you begin to develop a network of people, trust me, the opportunities will come.

Share:
TwitterLinkedInFacebook
Copy url Url was copied to clipboard
Subscribe to SANS Newsletters
Receive curated news, vulnerabilities, & security awareness tips
United States
Canada
United Kingdom
Spain
Belgium
Denmark
Norway
Netherlands
Australia
India
Japan
Singapore
Afghanistan
Aland Islands
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antarctica
Antigua and Barbuda
Argentina
Armenia
Aruba
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belize
Benin
Bermuda
Bhutan
Bolivia
Bonaire, Sint Eustatius, and Saba
Bosnia And Herzegovina
Botswana
Bouvet Island
Brazil
British Indian Ocean Territory
Brunei Darussalam
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Cook Islands
Costa Rica
Croatia (Local Name: Hrvatska)
Curacao
Cyprus
Czech Republic
Democratic Republic of the Congo
Djibouti
Dominica
Dominican Republic
East Timor
East Timor
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands (Malvinas)
Faroe Islands
Fiji
Finland
France
French Guiana
French Polynesia
French Southern Territories
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Heard And McDonald Islands
Honduras
Hong Kong
Hungary
Iceland
Indonesia
Iraq
Ireland
Isle of Man
Israel
Italy
Jamaica
Jersey
Jordan
Kazakhstan
Kenya
Kingdom of Saudi Arabia
Kiribati
Korea, Republic Of
Kosovo
Kuwait
Kyrgyzstan
Lao People's Democratic Republic
Latvia
Lebanon
Lesotho
Liberia
Liechtenstein
Lithuania
Luxembourg
Macau
Macedonia
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Micronesia, Federated States Of
Moldova, Republic Of
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nauru
Nepal
Netherlands Antilles
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Northern Mariana Islands
Oman
Pakistan
Palau
Palestine
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Pitcairn
Poland
Portugal
Puerto Rico
Qatar
Reunion
Romania
Russian Federation
Rwanda
Saint Bartholemy
Saint Kitts And Nevis
Saint Lucia
Saint Martin
Saint Vincent And The Grenadines
Samoa
San Marino
Sao Tome And Principe
Senegal
Serbia
Seychelles
Sierra Leone
Sint Maarten
Slovakia
Slovenia
Solomon Islands
South Africa
South Georgia and the South Sandwich Islands
South Sudan
Sri Lanka
St. Helena
St. Pierre And Miquelon
Suriname
Svalbard And Jan Mayen Islands
Swaziland
Sweden
Switzerland
Taiwan
Tajikistan
Tanzania
Thailand
Togo
Tokelau
Tonga
Trinidad And Tobago
Tunisia
Turkey
Turkmenistan
Turks And Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United States Minor Outlying Islands
Uruguay
Uzbekistan
Vanuatu
Vatican City
Venezuela
Vietnam
Virgin Islands (British)
Virgin Islands (U.S.)
Wallis And Futuna Islands
Western Sahara
Yemen
Yugoslavia
Zambia
Zimbabwe

Tags:
  • Security Awareness

Related Content

Blog
Security Awareness
June 16, 2022
Selling the SANS #SecAwareSummit to Your Boss
SANS SecAware Summit is an opportunity to network with and learn from your peers, develop your skills and expertise, and ultimately grow your career.
370x370_Lance-Spitzner.jpg
Lance Spitzner
read more
Blog
2022_Verizon_DBIR_–_What_Does_it_Mean_BlogThumbnail.jpg
Security Awareness
June 9, 2022
2022 Verizon DBIR – What Does it Mean?
Humans remain the number one driver of breaches today, demonstrating that cybersecurity is no longer just a technical challenge but a human one also.
370x370_Lance-Spitzner.jpg
Lance Spitzner
read more
Blog
Security Awareness
May 26, 2022
How to Use Phishing Benchmarks Effectively to Assess Your Program - Part 3
In part three of this mini-series on phishing benchmarks, we'll focus on internal benchmarking through comparison analysis.
Cheryl_Conley.jpg
Cheryl Conley
read more
  • Register to Learn
  • Courses
  • Certifications
  • Degree Programs
  • Cyber Ranges
  • Job Tools
  • Security Policy Project
  • Posters & Cheat Sheets
  • White Papers
  • Focus Areas
  • Cyber Defense
  • Cloud Security
  • Cybersecurity Leadership
  • Digital Forensics
  • Industrial Control Systems
  • Offensive Operations
Subscribe to SANS Newsletters
Receive curated news, vulnerabilities, & security awareness tips
United States
Canada
United Kingdom
Spain
Belgium
Denmark
Norway
Netherlands
Australia
India
Japan
Singapore
Afghanistan
Aland Islands
Albania
Algeria
American Samoa
Andorra
Angola
Anguilla
Antarctica
Antigua and Barbuda
Argentina
Armenia
Aruba
Austria
Azerbaijan
Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belize
Benin
Bermuda
Bhutan
Bolivia
Bonaire, Sint Eustatius, and Saba
Bosnia And Herzegovina
Botswana
Bouvet Island
Brazil
British Indian Ocean Territory
Brunei Darussalam
Bulgaria
Burkina Faso
Burundi
Cambodia
Cameroon
Cape Verde
Cayman Islands
Central African Republic
Chad
Chile
China
Christmas Island
Cocos (Keeling) Islands
Colombia
Comoros
Cook Islands
Costa Rica
Croatia (Local Name: Hrvatska)
Curacao
Cyprus
Czech Republic
Democratic Republic of the Congo
Djibouti
Dominica
Dominican Republic
East Timor
East Timor
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Ethiopia
Falkland Islands (Malvinas)
Faroe Islands
Fiji
Finland
France
French Guiana
French Polynesia
French Southern Territories
Gabon
Gambia
Georgia
Germany
Ghana
Gibraltar
Greece
Greenland
Grenada
Guadeloupe
Guam
Guatemala
Guernsey
Guinea
Guinea-Bissau
Guyana
Haiti
Heard And McDonald Islands
Honduras
Hong Kong
Hungary
Iceland
Indonesia
Iraq
Ireland
Isle of Man
Israel
Italy
Jamaica
Jersey
Jordan
Kazakhstan
Kenya
Kingdom of Saudi Arabia
Kiribati
Korea, Republic Of
Kosovo
Kuwait
Kyrgyzstan
Lao People's Democratic Republic
Latvia
Lebanon
Lesotho
Liberia
Liechtenstein
Lithuania
Luxembourg
Macau
Macedonia
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Martinique
Mauritania
Mauritius
Mayotte
Mexico
Micronesia, Federated States Of
Moldova, Republic Of
Monaco
Mongolia
Montenegro
Montserrat
Morocco
Mozambique
Myanmar
Namibia
Nauru
Nepal
Netherlands Antilles
New Caledonia
New Zealand
Nicaragua
Niger
Nigeria
Niue
Norfolk Island
Northern Mariana Islands
Oman
Pakistan
Palau
Palestine
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Pitcairn
Poland
Portugal
Puerto Rico
Qatar
Reunion
Romania
Russian Federation
Rwanda
Saint Bartholemy
Saint Kitts And Nevis
Saint Lucia
Saint Martin
Saint Vincent And The Grenadines
Samoa
San Marino
Sao Tome And Principe
Senegal
Serbia
Seychelles
Sierra Leone
Sint Maarten
Slovakia
Slovenia
Solomon Islands
South Africa
South Georgia and the South Sandwich Islands
South Sudan
Sri Lanka
St. Helena
St. Pierre And Miquelon
Suriname
Svalbard And Jan Mayen Islands
Swaziland
Sweden
Switzerland
Taiwan
Tajikistan
Tanzania
Thailand
Togo
Tokelau
Tonga
Trinidad And Tobago
Tunisia
Turkey
Turkmenistan
Turks And Caicos Islands
Tuvalu
Uganda
Ukraine
United Arab Emirates
United States Minor Outlying Islands
Uruguay
Uzbekistan
Vanuatu
Vatican City
Venezuela
Vietnam
Virgin Islands (British)
Virgin Islands (U.S.)
Wallis And Futuna Islands
Western Sahara
Yemen
Yugoslavia
Zambia
Zimbabwe
  • © 2022 SANS™ Institute
  • Privacy Policy
  • Contact
  • Careers
  • Twitter
  • Facebook
  • Youtube
  • LinkedIn